Input validation

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

Input validation

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

CVE-2021-1159

The CVE-2021-1159 family affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. Vulnerabilities stem from improper input validation in the web-based management interface and UPnP service, enabling an authenticated remote attacker to execute arbitrary code as root or cause a devic...

CVE-2021-1198

Cisco CVE-2021-1198 affects the Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The flaws reside in the web-based management interface due to improper validation of user-supplied input, exploitable by an authenticated remote attacker who can send crafted HTTP requests to the devic...

CVE-2021-1196

The CVE-2021-1196 entry concerns Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. Affects the web-based management interface and is due to improper validation of user-supplied input. An authenticated, remote attacker with valid administrator credentials could send crafted HTTP requ...

CVE-2021-1186 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

CVE-2021-1217

CVE-2021-1217 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The web-based management interface has improper input validation, enabling an authenticated attacker with admin credentials to send crafted HTTP requests that execute arbitrary code as root or cause a restart (D...

CVE-2021-1209

CVE-2021-1209 concerns multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The flaws stem from improper validation of user-supplied input in the web UI, allowing an authenticated attacker with valid admin credentials to...

CVE-2021-1207

Cisco Small Business RV110W, RV130, RV130W, and RV215W routers suffer web-based management interface input validation vulnerabilities that can allow an authenticated attacker to execute arbitrary code as root or cause a device restart (DoS) via crafted HTTP requests. Exploitation requires valid a...

CVE-2021-1184

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities in the Universal Plug and Play UPnP service and the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow a remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. For more...

CVE-2021-1188

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

CVE-2021-1205

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

Cisco IOS Access Points DoS (cisco-sa-20190717-aironet-dos)

A denial of service DoS vulnerability exists in Cisco IOS Access Points due to a lack of complete error handling condition for client authentication requests sent to a targeted interface configured for FT. An unauthenticated, adjacent attacker can exploit this issue, by sending crafted...

Cisco IOS XR Authenticated User Privilege Escalation (cisco-sa-iosxr-cli-privescl-sDVEmhqv)

According to its self-reported version, Cisco IOS XR Software is affected by a privilege escalation vulnerability in task group assignment for a specific CLI command due to incorrect mapping of task groups assignments. An authenticated, local attacker with read permissions could exploit this...

CVE-2020-3403

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to inject a command to the underlying operating system that will execute with root privileges upon the next reboot of the device. The authenticated user must have privileged EXEC permissions on the...

CVE-2020-3530

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to execute that command, even though administrative privileges should be required. The attacker must have valid credentials on the affected device. The...

Command injection

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to execute that command, even though administrative privileges should be required. The attacker must have valid credentials on the affected device. The...

Cisco IOS XR Authenticated User Privilege Escalation Vulnerability

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to execute that command, even though administrative privileges should be required. The attacker must have valid credentials on the affected device. The...

Huawei Data Communication: Buffer Overflow Vulnerability in Some Huawei Products (huawei-sa-20171213-01-ike)

Some Huawei products have a buffer overflow vulnerability due to incomplete range checks of the input data. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...